General
- Target 6e0f1ec842ce6e648329523f74befb5d43beac03ed6c31424cd40b2795dad3e0.exe
- Size 626KB
- Sample260628-yrj3tac151
- SHA256 6e0f1ec842ce6e648329523f74befb5d43beac03ed6c31424cd40b2795dad3e0
- MD5 3cbd099c152af463c8f7efcfb2685666
- SHA1 e12bc92b83ef11e7c79fbe50d837079f8bec272a
- SHA512 8f9daa0cf08058206ab46d597e26a03407987447e64cbcf40332662c587a693229d5b8cf5b379ac8d82077754f09cd07bec20a676532b6bae91a5e15a9ed1d76
- SSDEEP 12288:CZL8K7flZQP2MfAeWoqOKpqs3+Jt6eJcJYYoF5Zr:cQKjlZQuaVWoqVpqsuJt6YcJYY05
- TLSH T12CD47D4AA3A441F4D077C235CA838537E6B2BC056670862F13D74E5B6F273A15F2EB26
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
6e0f1ec842ce6e648329523f74befb5d43beac03ed6c31424cd40b2795dad3e0.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
6e0f1ec842ce6e648329523f74befb5d43beac03ed6c31424cd40b2795dad3e0.exe
Resource
win11ltsc2024-20260617-en
1 signatures
150 seconds
Malware Config
Extracted
Family
-
remcos
Version
-
7.2.6 Pro
Botnet
-
31
C2
-
149.33.34.27:2404
Attributes
-
audio_folder
MicRecords
-
audio_path
ApplicationPath
-
audio_record_time
5
-
connect_delay
0
-
connect_interval
1
-
copy_file
remcos.exe
-
copy_folder
Remcos
-
delete_file
false
-
hide_file
false
-
hide_keylog_file
false
-
install_flag
false
-
keylog_crypt
false
-
keylog_file
logs.dat
-
keylog_flag
false
-
keylog_folder
remcos
-
mouse_option
false
-
mutex
Rmc-SX5JIV
-
screenshot_crypt
false
-
screenshot_flag
false
-
screenshot_folder
Screenshots
-
screenshot_path
%AppData%
-
screenshot_time
10
-
take_screenshot_option
false
-
take_screenshot_time
5
Targets
-
- Target 6e0f1ec842ce6e648329523f74befb5d43beac03ed6c31424cd40b2795dad3e0.exe
- Size 626KB
- SHA256 6e0f1ec842ce6e648329523f74befb5d43beac03ed6c31424cd40b2795dad3e0
- MD5 3cbd099c152af463c8f7efcfb2685666
- SHA1 e12bc92b83ef11e7c79fbe50d837079f8bec272a
- SHA512 8f9daa0cf08058206ab46d597e26a03407987447e64cbcf40332662c587a693229d5b8cf5b379ac8d82077754f09cd07bec20a676532b6bae91a5e15a9ed1d76
- SSDEEP 12288:CZL8K7flZQP2MfAeWoqOKpqs3+Jt6eJcJYYoF5Zr:cQKjlZQuaVWoqVpqsuJt6YcJYY05
- TLSH T12CD47D4AA3A441F4D077C235CA838537E6B2BC056670862F13D74E5B6F273A15F2EB26
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10